How to Secure your Router - What Not To Do
Welcome to Dev Odyssey Network Security!
With data privacy at its utmost concern to date, this video gives you an idea on how a consumer grade wireless network is not secure, and potentially your personal information. This video is meant to educate, so that you can make informed decisions with your networks and home, and even start to learn how to remediate security gaps.
Below, are the notes and reasons covered in the video:
1. Minimal Firewall Capabilities
All inbound blocked
All outbound allowed
Some inbound in (port forward)
Lack of outbound controls means anyone can visit a bad site
Akin to opening the door to a someone looking to steal from your home
2. Flat Network
Standard Network is 192.168.1.1 to 192.168.1.255
Bad because every device can talk to each other with no controls
Akin to renting the basement to a tenant, and letting them roam the
whole house
3. Default Passwords
Standard password combinations are well known, like admin/admin
Bad because anyone you let on your network, can get access to
your network interface, and control your router, therefore your whole
network and possibly devices on it
4. Wireless Security
Standard Wireless Security (WEP, WPA, WPA2 Personal)
WEP is broken, shouldn't be found on most routers
WPA is broken, still can be found on most routers
Can find WPA/WPA2 combination
Bad because someone can force to attempt a WPA connection for a
"older device", and begin to deploy a crack to break the password, and
then get on the network.
5. Default Vulnerabilities
Many services constitute a router, to name a few, DHCP, DNS, NAT, etc
These services can be vulnerable when first creating your network
Bad because not everyone updates their routers, let alone, some routers
may not even provide updates to fix these issues
Always stay up to date with the latest firmware
Bonus
6. Admin Console Settings (lack thereof)
Newer Routers now promote Access via Phone App, via the internet
May still support local access, but can be less configurable than Phone App
Bad because there is no control over only administering the network locally, instead
internet option is left open, which can possibly become vulnerable and compromised
Apple Commercial on Privacy:
• Video
To learn more about network basics, click the links below to understand how they work.
IP (Internet Protocol)
https://en.wikipedia.org/wiki/Interne...
DHCP
https://en.wikipedia.org/wiki/Dynamic...
DNS
https://en.wikipedia.org/wiki/Domain_...
NAT
https://en.wikipedia.org/wiki/Network...
Firewall
https://en.wikipedia.org/wiki/Firewal...)
Wireless Security
https://en.wikipedia.org/wiki/Wireles...